CVE-2026-125237 | FFmpeg up to 9.0.2 DPX Image libavcodec/dpx.c start_frame/decode_slice/end_frame hwaccel_picture_private denial of service

A vulnerability marked as problematic has been reported in FFmpeg up to 9.0.2. This affects the function start_frame/decode_slice/end_frame of the file libavcodec/dpx.c of the component DPX Image Handler. Performing a manipulation of the argument hwaccel_picture_private results in denial of service.

This vulnerability was named CVE-2026-125237. The attack needs to be approached locally. There is no available exploit.VulDB Recent EntriesRead More